Privacy policy

This is a translation for convenience. In case of doubt, the German version is authoritative.

This notice explains what happens to personal data when you use the ZombyIO website, the dashboard and the Discord bot. It describes what the software actually does.

Who is responsible

The controller within the meaning of the GDPR is the provider named in the imprint. A data protection officer is not required and has not been appointed.

Where it runs

The website, the dashboard, the bot and the database run on a server operated by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, in a data centre in Germany. Hetzner processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. The domain is registered with STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin.

Visiting the site

Each request is recorded with the IP address, the time, the requested address, the referring page and the browser identification, so the service can be delivered and attacks can be recognised. Legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in operating the service securely. These records are kept for a short period and then deleted.

Cookies

Apart from zomby_promo, which is set only by a referral link or by a discount code you enter, ZombyIO uses only cookies that are strictly necessary for the functions you asked for. There is no advertising, no analytics service, no third-party cookie and nothing that follows you across other websites. Nothing here builds a profile of you.

Every cookie below except zomby_promo is strictly necessary to provide the service you requested, so no consent is required for them under § 25 (2) no. 2 TDDDG. Legal basis for the associated processing is Art. 6 (1) (b) GDPR for the login and Art. 6 (1) (f) GDPR for the display preferences. What happens to the code in zomby_promo is described under Payments. You can delete cookies at any time in your browser; the login, your saved preferences and a stored discount code will then be lost.

Your account

Logging in happens through Discord. We receive and store your Discord user id, your username, your avatar and your language setting, and which servers you may administer. Your Discord access token is stored encrypted with AES-256-GCM so the dashboard can act on your behalf. For each active session we also store the browser identification and the time of last use, so that you can recognise and end sessions on the settings page. Legal basis is Art. 6 (1) (b) GDPR, performance of the contract you enter into by using the dashboard.

Account bans

We can ban an account from the dashboard and the bot, for example after abuse of the service. The ban is stored with the Discord id, the reason, when it was set and when it ends, or that it is permanent. The person sees the ban and its reason in the dashboard and on the settings page, and it is part of the data export. Legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in protecting the service and the people using it from abuse. If the account is deleted while a ban is still in force, the ban is kept until it ends and then deleted, so that deleting the account and signing in again cannot lift it. A ban that has already ended is deleted with the account.

Support and who can see your data

When you write to support, a staff member looks up your account or your server by the support ID you give them. Staff members sign in with their own Discord account and two-factor authentication. A supporter sees your profile, the servers you manage, the settings of those servers and how they are set up on Discord (roles, channels and permissions). Your sessions, your purchases and your Zomby balance open to a supporter only after you named the support code from your settings page, and then for 30 minutes; you can replace the code at any time, which closes that access at once. The support code is calculated when it is shown and is not stored. Staff can keep notes on an account, and every time a staff member opens an account or acts on it, that is logged with their account. Notes and log entries about you are part of your data export, without the staff member. Legal basis is Art. 6 (1) (b) GDPR for answering your request, and Art. 6 (1) (f) GDPR, our legitimate interest in being able to trace who accessed an account, for the log.

Server data

For each Discord server the bot is on, we store the settings configured in the dashboard, moderation cases with the reason and the Discord ids involved, and members’ experience point totals. Everything is keyed by Discord id; we do not store names or email addresses of your members. Legal basis is Art. 6 (1) (f) GDPR, the legitimate interest of the server operator in moderating their community.

BrainDrop

Server administrators can use BrainDrop to send a copy of some of a server’s settings to another server. A drop stores the chosen settings, the name and icon of the server it came from and the Discord id of the administrator who made it; lists of individual members are left out of every drop meant for another server. Anyone who has the link can see which settings it holds and receive them on a server they manage. Before a server receives a drop, the settings it is about to replace are kept as a backup, with the Discord id of the administrator who received it, so that the change can be undone. Every drop and every backup is deleted 7 days after it was made; whoever made a link can withdraw it earlier. Legal basis is Art. 6 (1) (f) GDPR, the legitimate interest of server operators in setting up their servers.

Message content

Auto moderation examines the text of messages in the bot’s working memory to decide whether a rule applies, and discards it immediately afterwards. Message content is never written to the database. If a rule fires, what is recorded is the rule that matched and a short extract of what matched it, not the message.

Connected Twitch channels

Streamers can connect their own Twitch account on our connect page so that their go-live reaches the Discord servers that follow them instantly. We store the Twitch channel id, the channel name and the display name, all of which are already public on the channel page, together with the permission Twitch reported and the times of connecting and last confirming. We do not store the access token, we do not store a refresh token, and we do not read the email address, even though the permission Twitch requires for recording a connection would allow it. Legal basis is Art. 6 (1) (a) GDPR, consent, given by the authorisation on Twitch. Withdrawing it under Connections in your Twitch settings is passed to us by Twitch and we delete the record.

Stream Drops: watchtime and rewards

On servers that run a Stream Drops campaign, viewers can link their own Twitch account to their ZombyIO account. We store the Twitch account id, the login name and the display name; no token is stored and we do not read the email address. While a connected streamer is live, we read from Twitch the public list of who is in the channel’s chat and credit watchtime to linked viewers. Per server we store the seconds watched today, this month and in total, the progress toward the next drop, the number of drops received today, the last time the viewer was seen watching, and whether the viewer is still on the Discord server. Being in the audience is enough; nothing anyone writes in the chat is read. Legal basis is Art. 6 (1) (a) GDPR, consent, given by linking the account. You can withdraw it at any time with the Unlink Twitch button on any drops page or on the settings page, or by removing ZombyIO under Connections in your Twitch settings, which Twitch passes on to us and which has the same effect. From then on no watchtime is collected for you: the link is deleted, and your entries can no longer be matched to anyone in a chat. The counters and the drop history collected until then stay with your ZombyIO account until it is deleted, because they decide whether a one-time drop or the daily limit has already been used if you link Twitch again.

Every drop received is stored with its kind, its cause, its label and the reward itself, including a gift code the viewer won, together with the time, and is shown only to the viewer themselves; the bot announces it by direct message. Gift codes an administrator stocks are stored until they are handed out. Once a code is handed out and recorded in the winner’s drop history, the pool keeps only that it was handed out, when and to whom, not the code: the code itself remains only in the winner’s drop history. A role granted for a limited time is stored with server, role and expiry until the role is removed again. That record is the one exception to deletion: it survives the erasure of the account so that the temporary role still expires instead of becoming permanent. Everything else, the Twitch link, all watchtime and the entire drop history, is deleted with the ZombyIO account and is included in the data export on the settings page.

Payments

Premium subscriptions are processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Payment is made on Stripe’s own pages; card details never reach our servers. We store the Stripe customer and subscription identifiers and the state of the subscription. Legal basis is Art. 6 (1) (b) GDPR.

A discount code from a referral link or from the code field on the Billing page stays in the zomby_promo cookie for 30 days, and every checkout in that time applies it while the code is valid. If you buy with it, the code is passed to Stripe with the checkout and stored with the subscription; a redeemed gift code is stored with the Premium time it unlocked. For each code we count, as a plain number, how often its referral link was clicked; a browser that already holds the code is not counted again. If a code belongs to a partner, the partner’s Zomby balance is credited for the purchase. Partners see only how many clicks and purchases their code brought, not who made them. Legal basis is Art. 6 (1) (b) GDPR for the discount and Art. 6 (1) (f) GDPR for the click count and the credit, our legitimate interest in paying correctly for referrals.

A Zomby balance is a list of entries under a Discord id: each commission, each Premium purchase paid with the balance and each correction we make, with amount, kind and time. The balance cannot be paid out. A code can be linked to a partner’s ZombyIO account; the partner then sees the code’s link, clicks and purchases in their affiliate area. Visitors who arrive with a partner’s code see the name or YouTube channel it is promoted under. The entries are accounting records and are kept as long as commercial and tax law require, even after the account is deleted (Art. 6 (1) (c) GDPR with § 147 AO and § 257 HGB); any remaining balance is then available again if the same Discord account signs in. Deleting the account removes the link between the account and its codes, so later purchases through those codes no longer earn a commission.

Discord

ZombyIO is a Discord application and cannot work without exchanging data with Discord. Discord is the controller for its own processing; for users in the EEA this is Discord Netherlands B.V., with its parent Discord Inc. in the United States. In the dashboard, avatars and server icons are loaded directly from Discord’s content network, which means your IP address reaches Discord at that moment. Discord’s own privacy policy applies to everything Discord does with it.

Transfers outside the EU

Data reaching Discord and Stripe may be processed in the United States. Those transfers are based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise on standard contractual clauses pursuant to Art. 46 (2) (c) GDPR.

How long we keep things

• Session: 30 days after signing in, or immediately when you log out.
• Server data: deleted 90 days after ZombyIO is removed from that server.
• BrainDrops and their backups: deleted 7 days after they were made.
• Server Check fixes: deleted 30 days after they were made.
• Moderation cases: kept while the bot is on the server, so a case history stays meaningful.
• Billing records: kept as long as required by commercial and tax law.
• Zomby balance entries: as long as commercial and tax law require, even after the account is deleted.
• Account bans: until the account is deleted; a ban still in force at that point stays until it ends.
• Support notes on your account: until you delete your account. The log of when staff opened an account: 365 days.

Your rights

Under the GDPR you have the right to:

• access the data we hold about you (Art. 15),
• have inaccurate data corrected (Art. 16),
• have your data deleted (Art. 17),
• have processing restricted (Art. 18),
• receive your data in a portable format (Art. 20),
• object to processing based on legitimate interests (Art. 21).

Access, portability and erasure are self-service: on the settings page of the dashboard you can download your data as a file and delete your account yourself. For everything else, write to the address in the imprint or to the email address above. We answer within one month.

Complaints

You may complain to a supervisory authority. The one responsible for us is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden.

Is providing data required?

You do not have to provide anything. Without a Discord login there is no dashboard, and without the settings you enter the bot has nothing to act on; there is no other consequence.

Changes

When the software changes in a way that changes this notice, the notice is updated with it. The date above says when it was last reviewed.